Lucene search
HistoryMay 17, 2024 - 9:15 a.m.
CVE-2024-24874
cve-2024-24874
basic xss
codepeople cp polls
code injection
web page
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.0%
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71.
Related
cve
cve
CVE-2024-24874
2024-05-17 09:15:24
cvelist
cvelist
vulnrichment
vulnrichment
wpvulndb
wpvulndb
CP Polls < 1.0.72 - Unauthenticated Content Injection
2024-02-09 00:00:00
wordfence
wordfence
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2024-24874